CVE-2007-4382: CounterPath X-Lite 3.0 34025, and possibly eyeBeam, allows remote attackers to cause a denial of service (d...

Security readout for executives and security teams

This is an old remote denial-of-service issue in CounterPath X-Lite 3.0 build 34025, with eyeBeam listed as possible. A malformed SIP call setup message can crash the phone client. It is a service-disruption risk, not reported here as data theft or code execution. Exposure is most likely in legacy VoIP environments still running CounterPath X-Lite 3.0 build 34025 or possibly eyeBeam, especially where SIP endpoints accept signaling from untrusted networks. Modern replacements or tightly controlled SIP infrastructure reduce likelihood. Treat as a targeted availability risk for legacy VoIP users. Prioritize remediation if these clients support business-critical calling or receive SIP traffic from outside trusted infrastructure. Otherwise, track as legacy cleanup and exposure reduction. Mitigation focus: Replace or retire affected legacy CounterPath softphone clients where possible.; Restrict SIP signaling to trusted proxies, SBCs, or VPN paths.; Block direct untrusted inbound SIP traffic to endpoint devices..

Prepared

Jun 29, 2026, 04:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.